This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft File: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft (raw, json) Hash identifier: 8AqcnuxnJ2KLMYGvkM11SxczIJZQvn7sgnePBFP1OIo= Subject key identifier: 4C:07:E6:0F:FD:49:DD:31:AE:54:16:99:65:AA:20:19:8E:CA:82:E9 Authority key identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 Certificate issuer: /CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Certificate serial: 394560ACA5F408271A4452FA009B6F3F7DDB8232 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft Manifest number: 0531 Signing time: Thu 18 Dec 2025 15:01:27 +0000 Manifest this update: Thu 18 Dec 2025 14:56:27 +0000 Manifest next update: Sun 21 Dec 2025 19:08:27 +0000 Files and hashes: 1: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl (hash: pqmRaQb4GThPyL0gunW93y5WFDh69yhF1O0Y7agTX9w=) 2: 3130332e3135332e33342e302f32342d3234203d3e20313430343532.roa (hash: L+WYyxtBJBb4IPQAp+Phpn95Mr1s/ocDbq38zQ6JLtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:45:60:ac:a5:f4:08:27:1a:44:52:fa:00:9b:6f:3f:7d:db:82:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Validity Not Before: Dec 18 14:56:27 2025 GMT Not After : Dec 21 19:08:27 2025 GMT Subject: CN=4C07E60FFD49DD31AE54169965AA20198ECA82E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:98:1a:c8:2f:39:3e:de:c5:c8:2f:c3:a8:68: 94:1b:d5:08:e7:7c:bd:bd:e2:c3:ec:45:03:8d:57: 82:2d:3e:6f:06:a1:7e:22:c2:84:e8:c0:f4:d9:36: fa:35:4f:c4:65:b4:9c:85:0f:08:a4:b2:28:7c:78: e8:1f:4c:c5:d3:89:ae:49:ce:20:e4:4a:44:a8:d1: b8:9a:e6:89:e2:ed:a9:b6:01:5e:20:21:20:5e:ab: 74:e4:3d:68:e9:d5:de:bc:44:ac:f9:3a:56:56:89: 5a:a5:c2:45:ce:d9:48:fd:6d:94:fc:75:5f:ce:10: e6:e2:cf:a5:33:5b:d5:3a:3f:80:7e:c4:d1:ff:2a: 63:62:05:6b:55:1c:69:b6:ab:d0:1a:0b:55:6b:bf: da:f8:0e:89:01:d8:92:34:c1:3c:b0:a4:69:c1:44: 5d:d2:c6:20:6c:5a:a3:99:d8:d9:02:04:36:e5:e2: 09:f1:59:09:79:98:58:55:7a:f3:2e:26:97:96:1f: c2:86:44:df:d5:fe:c9:10:68:34:d0:85:a7:a5:81: cd:7f:3c:cd:97:15:47:38:d4:e9:0a:65:9c:2f:19: b5:25:ac:04:06:f4:aa:65:d9:f8:05:67:e6:0a:1f: dc:5b:6d:b5:11:80:3e:f4:ea:8b:57:64:01:e6:9f: 03:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:07:E6:0F:FD:49:DD:31:AE:54:16:99:65:AA:20:19:8E:CA:82:E9 X509v3 Authority Key Identifier: keyid:B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:34:ce:0a:02:e1:23:8c:9e:1b:27:93:41:f7:e0:87:1f:e2: ae:1e:aa:fb:21:23:1e:be:52:ec:e7:1d:f8:7b:6f:06:ff:d2: 4c:6d:6a:15:1d:b7:56:6f:5d:bf:4e:04:af:5c:cf:5f:fd:16: 99:23:06:88:be:85:4c:5b:37:5f:7a:71:58:9f:7f:39:b3:ba: a4:d8:7e:9e:2c:01:e3:1a:ad:d8:77:f7:ac:ff:c1:fc:87:41: 59:5f:63:af:ea:a9:96:a9:df:99:51:e0:ca:9d:c5:8e:1b:84: 1e:60:71:a5:0f:3a:2d:55:f4:f9:0e:e4:c5:15:55:42:4f:79: 46:51:83:43:ca:ed:7f:74:40:15:a3:64:9b:b2:7b:99:7d:cb: a2:71:9c:9d:e8:97:a8:00:75:a5:ce:85:17:af:3c:96:b8:1d: 8e:c6:b3:e8:b6:bf:a1:12:b9:91:ab:98:c7:72:2e:c0:0e:53: 90:1f:66:09:8e:a6:5f:88:32:66:69:ed:f5:01:fa:aa:42:a2: 04:07:70:52:61:1f:3e:5c:98:c3:fc:a4:01:58:05:13:9b:3d: d1:1b:ee:26:c5:8e:1f:d1:fa:e6:05:20:c9:21:b6:2a:35:0e: 72:85:63:7f:dd:6f:53:5f:44:b2:97:f1:87:ef:e9:f5:d9:b6: 1f:8e:bd:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUVgrKX0CCcaRFL6AJtvP33bgjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIzRTVB QUZDNjRGNzAeFw0yNTEyMTgxNDU2MjdaFw0yNTEyMjExOTA4MjdaMDMxMTAvBgNV BAMTKDRDMDdFNjBGRkQ0OUREMzFBRTU0MTY5OTY1QUEyMDE5OEVDQTgyRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcmBrILzk+3sXIL8OoaJQb1Qjn fL294sPsRQONV4ItPm8GoX4iwoTowPTZNvo1T8RltJyFDwiksih8eOgfTMXTia5J ziDkSkSo0bia5oni7am2AV4gISBeq3TkPWjp1d68RKz5OlZWiVqlwkXO2Uj9bZT8 dV/OEObiz6UzW9U6P4B+xNH/KmNiBWtVHGm2q9AaC1Vrv9r4DokB2JI0wTywpGnB RF3SxiBsWqOZ2NkCBDbl4gnxWQl5mFhVevMuJpeWH8KGRN/V/skQaDTQhaelgc1/ PM2XFUc41OkKZZwvGbUlrAQG9Kpl2fgFZ+YKH9xbbbURgD706otXZAHmnwNBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTAfmD/1J3TGuVBaZZaogGY7KgukwHwYDVR0j BBgwFoAUtZEFm2ry9dZuu9FAMdoj5ar8ZPcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGM0MWMxYS1lMDg4LTRlZjYtOWQyOC04MTRjNjE0NTZkMzAvMC9CNTkxMDU5QjZB RjJGNUQ2NkVCQkQxNDAzMURBMjNFNUFBRkM2NEY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIzRTVBQUZD NjRGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRjNDFjMWEtZTA4OC00ZWY2LTlk MjgtODE0YzYxNDU2ZDMwLzAvQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIz RTVBQUZDNjRGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGc0zgoC4SOMnhsnk0H34Icf4q4eqvshIx6+ UuznHfh7bwb/0kxtahUdt1ZvXb9OBK9cz1/9FpkjBoi+hUxbN196cViffzmzuqTY fp4sAeMardh396z/wfyHQVlfY6/qqZap35lR4MqdxY4bhB5gcaUPOi1V9PkO5MUV VUJPeUZRg0PK7X90QBWjZJuye5l9y6JxnJ3ol6gAdaXOhRevPJa4HY7Gs+i2v6ES uZGrmMdyLsAOU5AfZgmOpl+IMmZp7fUB+qpCogQHcFJhHz5cmMP8pAFYBRObPdEb 7ibFjh/R+uYFIMkhtio1DnKFY3/db1NfRLKX8Yfv6fXZth+OvRU= -----END CERTIFICATE-----Generated at Fri Dec 19 03:14:23 2025 by rpki-client